An alternative approach may be to launch a program on the laptop which:- 1. Waits for the VPN to be established 2. Checks for the age of the password via AD 3. Prompts the user to change password if appropriate 4. Shuts down
A bit messy, but fairly simple. Alan Cuthbertson Policy Management Software:- http://www.sysprosoft.com/index.php?ref=activedir&f=pol_summary.shtml ADM Template Editor:- http://www.sysprosoft.com/index.php?ref=activedir&f=adm_summary.shtml Policy Log Reporter(Free) http://www.sysprosoft.com/index.php?ref=activedir&f=policyreporter.shtml ----- Original Message ----- From: "Renouf, Phil" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, December 10, 2004 6:31 AM Subject: RE: [ActiveDir] Expired Accounts Not really. At least not unless they are using something like Citrix or Terminal Services or Remote Desktop. I don't even think logging into Exchange (outlook) will prompt you. Many VPN clients have the ability to run as a service though (I know Nortel does for sure) so you can set it up to establish the VPN connection before the user logs into their laptop which will mean that when they login they get prompted when their password is going to expire. Phil -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bart Vandyck Sent: Thursday, December 09, 2004 1:47 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] Expired Accounts Hi all, A client of mine is thinking about implement a password policy where all users have to change there password every xx days with notification 7 days ahead. They have al lot of off site workers who never come into they office. They only connect thru vpn. So they first log on with cached credentials on there laptop and then connect with vpn. Will they still recieve a message to change there password when the start using network resources (mail, file,....) rgds, Bart List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
